* Romain Francoise:

> Update about this bug: I notified upstream about it two weeks ago but
> nobody seemed to care; the project is pretty much dead upstream.

Do we really want to release software which is dead upstream?

> That being said, I'm not sure that the issue is RC anyway, the problem
> remains theoretical and I don't think anyone in their right mind would
> use tcc to compile production (i.e. security-sensitive) code...
>
> What do you think?

I think it's an ordinary wrong-code bug.  We need to draw a line
somewhere; otherwise *any* bug in GCC is a security bug, which makes
no sense.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to